Privacy Policy — Heart to Art

Heart to Art ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect through our website, in-studio interactions, class bookings, waivers, and marketing communications; how we use and share it; and the rights you have over your information. By using our website or services you agree to this Policy.

1. Who we are

Heart to Art operates an art studio and companion website. Contact us at hello@hearttoart.studio. Mailing / studio address: our studio address (available on request).

2. Information we collect

Information you give us

Contact details: name, email, phone, mailing address.
Booking details: participant name, age, class selected, seats, notes.
Guardian / waiver details: signer name, email, typed signature, indication of minor status.
Message content submitted through contact or intake forms.
Optional marketing subscriptions (email / SMS opt-ins).

Information collected automatically

Device and browser data (IP address, user agent, referring URL, pages viewed, timestamps).
Cookies and similar technologies used for authentication, session integrity, load balancing, and analytics.
Aggregated event data (e.g., which pages or classes are most popular).

Information from third parties

Payment confirmations from our payment processor (we do not store full card numbers).
Social profile data you make public if you tag or interact with our accounts.

3. How we use information

To confirm, deliver, and follow up on classes, workshops, private lessons, and events.
To administer the digital liability waiver required for participation.
To respond to inquiries and provide customer service.
To process payments and issue receipts.
To send transactional messages (booking confirmations, reminders, schedule changes).
To send marketing communications where you have opted in (you may unsubscribe at any time).
To operate, secure, and improve our website and studio operations.
To comply with legal, tax, insurance, safety, and regulatory obligations.
To establish, exercise, or defend legal claims.

4. Legal bases (where applicable)

Where the EU/UK GDPR applies, we rely on: performance of a contract (bookings, waivers); consent (marketing, optional cookies); legitimate interests (site security, service improvement, fraud prevention); and legal obligation (accounting, safety records).

5. Children and minors

Many of our classes serve minors. A parent or legal guardian must complete the waiver and booking for any participant under 18. We do not knowingly collect personal information directly from children under 13 through our website without verifiable parental consent. If you believe a child has provided us information without appropriate consent, contact us and we will delete it.

6. How we share information

We do not sell your personal information. We share limited information only with:

Service providers acting on our behalf (hosting, database, email/SMS delivery, payment processing, analytics, calendar tools, marketing platforms) under contract and only as needed to provide their services.
Instructors and staff involved in your class or event.
Professional advisors (accountants, insurers, attorneys) as reasonably necessary.
Authorities when required by law, subpoena, court order, or to protect the rights, property, or safety of Heart to Art, our students, or the public.
A successor entity in the event of a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.

7. Cookies and tracking

We use strictly necessary cookies to keep the site working and, where enabled, analytics cookies to understand aggregate usage. You can control cookies through your browser settings. Blocking some cookies may impact site functionality (e.g., staying signed in).

8. Data retention

We retain personal information for as long as needed to provide services, comply with legal obligations (including tax and safety records), resolve disputes, and enforce our agreements. Waivers are retained for the maximum period recommended by our insurer and applicable statutes of limitation. Marketing contacts are retained until you unsubscribe or request deletion.

9. Security

We implement administrative, technical, and physical safeguards designed to protect personal information (encryption in transit, access controls, hosted infrastructure with row-level authorization). No method of transmission or storage is 100% secure; you use our services at your own risk and are responsible for keeping your account credentials confidential.

10. Your choices and rights

Access, correction, or deletion of your information.
Withdrawal of consent to marketing at any time via unsubscribe links or by contacting us.
Portability of information you provided in a common electronic format.
Objection or restriction of certain processing.
Non-discrimination for exercising your rights.

Residents of California, Colorado, Virginia, Connecticut, Utah, the EU, the UK, and other jurisdictions may have additional rights under local law. To make a request, email hello@hearttoart.studio. We may need to verify your identity before fulfilling a request. We do not use your personal information for automated decision-making with legal or similarly significant effects.

11. Do Not Track and Global Privacy Control

Our site does not respond differently to Do Not Track browser signals. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control.

12. International transfers

We operate primarily in the United States. If you access our services from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. or other jurisdictions with different data protection laws than your own.

13. Third-party links

Our site may link to third-party sites. Their privacy practices are their own; we encourage you to review their policies before providing personal information.

14. Photos, video, and studio content

Photos or video captured in the studio may be used for portfolio, educational, or promotional purposes as described in the waiver and booking terms. You may request that we not publish identifiable images of you or your minor at any time by contacting us.

15. Changes to this Policy

We may update this Policy from time to time. The "Effective" date reflects the latest revision. Material changes will be posted here and, where appropriate, communicated by email.

16. Contact

Questions or requests about this Policy: hello@hearttoart.studio.